erik-krogh
|
8e05fdb369
|
make more imports private
|
2023-02-03 15:00:31 +01:00 |
|
erik-krogh
|
c5350ca6a0
|
add change-note
|
2023-02-03 14:47:58 +01:00 |
|
erik-krogh
|
cf094c2f4f
|
adjust which folders are seen as exported to remove an FP
|
2023-02-03 14:47:55 +01:00 |
|
erik-krogh
|
848b24cfe4
|
adjust concept tests after changing subprocess model
|
2023-02-03 14:47:55 +01:00 |
|
erik-krogh
|
ef44cb86c2
|
remove FPs related to parameters that are meant to be commands
|
2023-02-03 14:47:55 +01:00 |
|
erik-krogh
|
e9ebba3350
|
assume shell=False for subprocess calls, fixes FPs in e.g. youtube-dl
|
2023-02-03 14:47:55 +01:00 |
|
erik-krogh
|
d228cf0e7b
|
use more API-nodes to model subprocess.run (and friends)
|
2023-02-03 14:47:55 +01:00 |
|
erik-krogh
|
bce83bfc4e
|
add failing test for indirectly setting the shell=true flag for subprocess.run
|
2023-02-03 14:47:55 +01:00 |
|
erik-krogh
|
0a2c7d062c
|
add Fabric test, and add tracking of the shell flag in Fabric
|
2023-02-03 14:47:55 +01:00 |
|
erik-krogh
|
6bbc4f4a48
|
add more tests
|
2023-02-03 14:47:55 +01:00 |
|
erik-krogh
|
33c506d7fe
|
add minimal test for Array join as a sink, and learn that the order is flipped compared to JS. Thanks Copilot!
|
2023-02-03 14:47:55 +01:00 |
|
erik-krogh
|
5bddfc0d79
|
add test for f-strings as sink
|
2023-02-03 14:47:55 +01:00 |
|
erik-krogh
|
47a06d2824
|
add library inputs as a source, and get minimal test to work
|
2023-02-03 14:47:55 +01:00 |
|
erik-krogh
|
7fcc548665
|
add py/shell-command-constructed-from-input, but without a source.
It's a very direct port from Ruby, with only minor adjustments to fit the Python APIs
|
2023-02-03 14:47:55 +01:00 |
|
erik-krogh
|
187cfd7be7
|
add isShellInterpreted to the SystemCommandExecution concept
|
2023-02-03 14:47:54 +01:00 |
|
Geoffrey White
|
38eeb9c747
|
Swift: Model String methods.
|
2023-02-03 12:26:55 +00:00 |
|
Alex Ford
|
e17b3d975d
|
JS: pick up CryptographicKeys used in asmCrypto encrypt/decrypt calls
|
2023-02-03 12:16:25 +00:00 |
|
Alex Ford
|
6b2a92a7ca
|
JS: update CryptographicKey.expected
|
2023-02-03 12:12:47 +00:00 |
|
Geoffrey White
|
1077dcd2e3
|
Swift: Model String initializers.
|
2023-02-03 11:36:35 +00:00 |
|
Philip Ginsbach
|
b8bd98e476
|
Merge pull request #12075 from github/ginsbach/RemoveIncorrectStatement
remove statement about namespaces from documentation that no longer holds
|
2023-02-03 11:18:07 +00:00 |
|
Geoffrey White
|
142ca0c9fb
|
Swift: Model StringProtocol initializers.
|
2023-02-03 10:53:44 +00:00 |
|
Geoffrey White
|
d888510688
|
Swift: Fix incorrect taint to String fields.
|
2023-02-03 10:21:52 +00:00 |
|
Geoffrey White
|
d25de8c764
|
Swift: Taint fields of StringProtocol.
|
2023-02-03 10:16:33 +00:00 |
|
Philip Ginsbach
|
e552a6206d
|
shadowing and visibility of default predicates
|
2023-02-03 10:11:25 +00:00 |
|
Geoffrey White
|
21abe54d8d
|
Swift: Greatly extend tests of taint through strings.
|
2023-02-03 10:11:12 +00:00 |
|
Philip Ginsbach
|
09fdf744d4
|
introduce module signature member defaults
|
2023-02-03 10:01:59 +00:00 |
|
Geoffrey White
|
bf6ef43451
|
Swift: Document library model files consistently.
|
2023-02-03 09:59:35 +00:00 |
|
erik-krogh
|
3545bb0819
|
adjust qhelp based on review
|
2023-02-03 10:50:18 +01:00 |
|
Mathias Vorreiter Pedersen
|
4e7ca1a175
|
Merge pull request #12082 from github/post-release-prep/codeql-cli-2.12.2
Post-release preparation for codeql-cli-2.12.2
|
2023-02-03 09:40:57 +00:00 |
|
Philip Ginsbach
|
808d3e3a1f
|
Merge pull request #12084 from github/ginsbach/IncorrectEnvironmentNumbering
we actually only distinguish four environments
|
2023-02-03 09:37:39 +00:00 |
|
Alvaro Muñoz
|
50bd0707ce
|
remove redundant import
|
2023-02-03 10:19:35 +01:00 |
|
Alvaro Muñoz
|
3a9d650cb9
|
add qldocs for member predicates
|
2023-02-03 10:09:16 +01:00 |
|
Philip Ginsbach
|
56e0b19df8
|
we actually only distinguish four environments
|
2023-02-03 09:04:43 +00:00 |
|
Alvaro Muñoz
|
8cb022713e
|
include review feedback
|
2023-02-03 10:01:55 +01:00 |
|
Arthur Baars
|
9a4cec7691
|
Merge pull request #11956 from aibaars/json-log
Ruby: structured logging
|
2023-02-03 09:54:49 +01:00 |
|
Alvaro Muñoz
|
13242df149
|
Apply suggestions from code review
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>
|
2023-02-03 09:45:00 +01:00 |
|
Alvaro Muñoz
|
dd31be43e0
|
Support for Twirp framework
|
2023-02-03 09:35:22 +01:00 |
|
github-actions[bot]
|
faf21f3edb
|
Post-release preparation for codeql-cli-2.12.2
|
2023-02-02 23:01:04 +00:00 |
|
erik-krogh
|
6e712b293a
|
add tracking of strings to compile-sites for poly-redos, in the style of Ruby
|
2023-02-02 22:56:20 +01:00 |
|
Jami Cogswell
|
30b1a2edbc
|
Java: add first argument to copy sink
|
2023-02-02 16:20:54 -05:00 |
|
Jami Cogswell
|
61a8f5e425
|
Java: add signature to createTempDirectory sink
|
2023-02-02 16:19:20 -05:00 |
|
erik-krogh
|
34266cfa4c
|
simplify the QL-for-QL workflow, which should also fix the cache
|
2023-02-02 22:17:38 +01:00 |
|
Sarita Iyer
|
fd977cc277
|
Update CONTRIBUTING.md
|
2023-02-02 16:13:13 -05:00 |
|
Sim4n6
|
a0150849cb
|
Updated the expected test file
|
2023-02-02 21:42:47 +01:00 |
|
Sarita Iyer
|
465a3e0ece
|
fix typo
|
2023-02-02 15:36:34 -05:00 |
|
Alex Ford
|
b0b8f8725e
|
JS: add some CryptographicOperation#getBlockMode() tests
|
2023-02-02 20:30:30 +00:00 |
|
Alex Ford
|
aa2c532a78
|
JS: adjust test whitespace
|
2023-02-02 20:30:30 +00:00 |
|
Alex Ford
|
c25dc978df
|
JS: add blockMode to CryptographicOperation tests
|
2023-02-02 20:30:30 +00:00 |
|
Alex Ford
|
1435ef1862
|
CryptoAlgorithms: make CryptographicAlgorithm#matchesName split on underscores
|
2023-02-02 20:30:30 +00:00 |
|
Alex Ford
|
983055b8f9
|
JS: Use shared CryptographicOperation concept and implement BlockMode getBlockMode()
|
2023-02-02 20:30:30 +00:00 |
|